$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft File: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft (raw, json) Hash identifier: EbdygHUPRJhth+9rBi+dVGDAinicaXBbI2PtgGhEckA= Subject key identifier: 1D:95:3B:AF:49:92:BA:33:E9:4D:64:70:5B:24:EA:F2:39:78:36:5D Authority key identifier: CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52 Certificate issuer: /CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752 Certificate serial: 540AA79CF2F1051F60A985B4927A1063A04E294D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer Subject info access: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft Manifest number: BA Signing time: Mon 20 Oct 2025 04:22:06 +0000 Manifest this update: Mon 20 Oct 2025 04:17:06 +0000 Manifest next update: Tue 21 Oct 2025 06:09:06 +0000 Files and hashes: 1: 323830343a326565633a3a2f33322d3438203d3e20323634383631.roa (hash: Pmd2oHMVN3RO65spy8KBeP91n4F+2uJwEIYTdWohKkU=) 2: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl (hash: 3hQLqHXu2K/T7T55RuIr/CMYLFiiCkm9tPL+c/s9CbM=) 3: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: sszuikLyJCfK/q7HZ7Bf5gDMhQQ8QEhvjEDczDvmx9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0a:a7:9c:f2:f1:05:1f:60:a9:85:b4:92:7a:10:63:a0:4e:29:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752 Validity Not Before: Oct 20 04:17:06 2025 GMT Not After : Oct 21 06:09:06 2025 GMT Subject: CN=1D953BAF4992BA33E94D64705B24EAF23978365D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:62:53:2d:4d:ca:65:00:5d:33:8a:c1:77: df:f7:2a:e6:7c:44:cc:d7:30:0d:4f:61:91:5a:72: 2a:a8:a4:61:4d:3a:74:5e:06:5f:b7:7d:1e:3e:3d: c5:fe:b6:c9:33:c4:65:7a:b2:68:98:35:97:a4:cc: 1b:ed:f3:46:a0:a4:c9:a4:87:14:17:20:8e:c5:5d: 3d:c2:0d:26:5a:f3:e1:34:15:db:cf:cc:49:72:64: 05:db:80:41:82:5e:bf:d1:ce:31:bc:9c:5f:c6:71: a5:ec:0c:38:a8:26:6c:7e:65:0e:76:44:a7:89:ff: 60:47:2d:80:00:6e:e1:9a:c2:b7:1e:eb:a3:8e:99: 09:0b:20:ba:a9:43:f1:b8:8a:15:7c:3e:80:94:92: 41:7e:8b:b1:f5:2c:ac:77:ec:4f:ed:dd:90:59:50: 4d:66:a1:b4:51:9d:0f:09:2f:eb:24:82:06:04:3b: 53:56:7a:f2:25:1d:8c:8d:99:06:80:4d:2f:b3:cf: c7:9c:2b:96:1d:cf:dd:89:9e:03:ce:20:23:4c:76: e4:89:67:a5:d1:44:e2:9d:97:28:01:d4:94:de:b8: 65:5f:b2:1c:2e:2b:6e:2f:b6:34:98:5f:a3:2b:5c: 24:de:0a:64:7d:5b:00:fd:e7:84:d9:1b:1d:19:bd: e5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:95:3B:AF:49:92:BA:33:E9:4D:64:70:5B:24:EA:F2:39:78:36:5D X509v3 Authority Key Identifier: keyid:CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:55:6d:0a:78:8a:c9:05:20:77:92:3a:9d:6c:76:ed:d0:40: d7:c9:d2:80:71:e7:7e:46:e8:27:69:e6:87:7c:c5:3b:ef:7e: 65:48:8d:62:84:03:79:06:0e:cf:35:60:ff:67:db:2c:f4:c7: c7:1a:67:76:93:5c:af:49:bf:7f:75:d4:82:64:1f:0e:4a:80: 54:a5:94:35:89:43:c6:a3:5d:3b:70:3c:8b:77:a8:a4:3a:66: eb:dc:c1:d0:f0:58:b6:54:28:39:d6:58:b3:88:64:09:3d:92: bf:9c:f8:ae:f3:7c:c3:ee:af:69:e6:24:34:77:9f:2a:81:20: 28:70:84:ef:21:b7:c5:7b:b1:b3:93:54:87:40:e7:5a:89:5c: 34:fa:ce:77:ab:4b:20:34:ba:7f:9e:55:8e:bd:a4:da:65:ee: 3b:2d:7d:76:80:04:57:2b:b4:a4:19:80:e6:1b:3a:18:85:3a: e7:94:34:a2:37:74:f8:1c:a7:57:fb:94:b4:49:91:c3:fb:be: d6:6c:d9:e8:fe:e5:66:bc:d9:d5:f6:9e:52:63:b5:8c:e3:9d: 29:89:2b:71:35:37:28:af:35:0a:f1:66:66:aa:09:a5:7b:dd: 62:ad:19:2d:e0:79:88:49:7f:a7:84:82:1a:bc:cc:f9:c8:62: 1c:67:cc:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVAqnnPLxBR9gqYW0knoQY6BOKU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZDODg2RUM0RDlGMkM0QTMxRUU1M0FDMTU3MTRCRDRF NzAyODc1MjAeFw0yNTEwMjAwNDE3MDZaFw0yNTEwMjEwNjA5MDZaMDMxMTAvBgNV BAMTKDFEOTUzQkFGNDk5MkJBMzNFOTRENjQ3MDVCMjRFQUYyMzk3ODM2NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu72JTLU3KZQBdM4rBd9/3KuZ8 RMzXMA1PYZFaciqopGFNOnReBl+3fR4+PcX+tskzxGV6smiYNZekzBvt80agpMmk hxQXII7FXT3CDSZa8+E0FdvPzElyZAXbgEGCXr/RzjG8nF/GcaXsDDioJmx+ZQ52 RKeJ/2BHLYAAbuGawrce66OOmQkLILqpQ/G4ihV8PoCUkkF+i7H1LKx37E/t3ZBZ UE1mobRRnQ8JL+skggYEO1NWevIlHYyNmQaATS+zz8ecK5Ydz92JngPOICNMduSJ Z6XRROKdlygB1JTeuGVfshwuK24vtjSYX6MrXCTeCmR9WwD954TZGx0ZveUnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHZU7r0mSujPpTWRwWyTq8jl4Nl0wHwYDVR0j BBgwFoAUz8iG7E2fLEox7lOsFXFL1OcCh1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4 U0wvMC9DRkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQzg4NkVDNEQ5RjJDNEEz MUVFNTNBQzE1NzE0QkQ0RTcwMjg3NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4U0wvMC9D RkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMlVtCniKyQUgd5I6nWx27dBA18nSgHHnfkboJ2nmh3zFO+9+ZUiNYoQDeQYO zzVg/2fbLPTHxxpndpNcr0m/f3XUgmQfDkqAVKWUNYlDxqNdO3A8i3eopDpm69zB 0PBYtlQoOdZYs4hkCT2Sv5z4rvN8w+6vaeYkNHefKoEgKHCE7yG3xXuxs5NUh0Dn WolcNPrOd6tLIDS6f55Vjr2k2mXuOy19doAEVyu0pBmA5hs6GIU655Q0ojd0+Byn V/uUtEmRw/u+1mzZ6P7lZrzZ1faeUmO1jOOdKYkrcTU3KK81CvFmZqoJpXvdYq0Z LeB5iEl/p4SCGrzM+chiHGfMVw== -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:23 2025 by rpki-client